Aggregator

Thieves Targeting ATMs Across Latin America With New Malware

X-Force Exchange - Collection Feed
4 years 10 months ago
Summary Ocelot, the Offensive Security research team of Metabase Q, identified a new variant of Ploutus ATM malware in Latin America. The variant, Ploutus-I operates on ATMs from the Brazilian vendor Itautec. It allows for a jack-potting style attack where the money is stolen directly from the ATM but not an individual's account. Threat Type Malware Overview There has been a new variant of the Ploutus ATM malware seen in Latin America. The variant, Ploutus-I operates on ATMs from the Brazilian vendor Itaute

Is MFA a Security Illusion?

The Akamai Blog
4 years 10 months ago
A recent Akamai Security blog post, Massive Campaign Targeting UK Banks Bypassing 2FA, written by my colleague Or Katz, is a great insight into how attackers used very simple techniques to bypass two-factor (2FA) authentication security to obtain access to U.K. consumers' bank accounts.
Jim Black

KAMACITE ICS Threat Activity Group

X-Force Exchange - Collection Feed
4 years 10 months ago
Summary KAMACITE is an ICS threat activity group that obtains access to victim networks and enables other actors to carry out attacks. Dragos revealed their findings on this threat group in a recent blog post. Threat Type Malware Overview Dragos has published a blog post detailing a newly identified threat activity group targeting electric utilities, oil and gas operations, and various manufacturing organizations since as early as 2014. The group has been tied to the BLACKENERGY2 campaign and both the 2015

Local Privilege Escalation Vulnerabilities Discovered in Linux Kernel, Patches Available

X-Force Exchange - Collection Feed
4 years 10 months ago
Summary Alexander Popov, a security researcher from Positive Technologies, discovered and fixed five security vulnerabilities in the Linux kernel, now uniquely identified as CVE-2021-26708. Threat Type Vulnerability Overview Alexander Popov, a security researcher from Positive Technologies, discovered and fixed five security vulnerabilities in the Linux kernel's virtual socket implementation that could lead to a Denial of Service and other actions. They are noted together within CVE-2021-26708. Popov develo

Indian Vaccine Makers Targeted by Chinese Hackers

X-Force Exchange - Collection Feed
4 years 10 months ago
Summary Reuters is reporting on attacks against Indian biotech companies making a COVID-19 vaccine. Chinese state-sponsored group APT 10, also known as Stone Panda, are thought to be behind the attacks. Threat Type Targeting Overview Indian vaccine makers SII and Bharat Biotech have recently come under attack from Chinese hackers. The Chinese state-sponsored group APT 10, or Stone Panda, are suspected of the attacks on the biochemical companies. The group was able to identify vulnerabilities in the IT infra

linux进程隐藏手段及对抗方法 - bamb00

博客园_人怜直节生来瘦，自许高材老更刚。
4 years 10 months ago
1.命令替换 实现方法 替换系统中常见的进程查看工具（比如ps、top、lsof）的二进制程序 对抗方法 使用stat命令查看文件状态并且使用md5sum命令查看文件hash，从干净的系统上拷贝这些工具的备份至当前系统，对比hash是否一致，不一致，则说明被替换了。 注：需要在bin目录下执行。 2
bamb00

Hong Kong InfoSec Summit 2021 Talk - The adversary will come to your house!

Embrace The Red
4 years 10 months ago

Next week (on March, 9th 2021) I will be speaking at the Hong Kong Information Security Summit 2021.

歡迎, 你好!

I was invited to share my thoughts around protecting the modern (and remote) workplace. Of course, my talk is addressing this topic from a red teaming point of view. Conference details are here.

The adversary will come to your house

The name of the talk is “Red Team Strategies for Helping Protect the Modern Workplace” which might seem less creative, but there is some (hopefullly) good and interesting information in my talk.

Managed ad